Merge pull request #7380 from OpenLiberty/7378-24006CVE

24006 CVE changes to staging
OpenLiberty · Jun 5, 2024 · a2ef04c · a2ef04c
2 parents 5745750 + c1733b8
commit a2ef04c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/modules/ROOT/pages/security-vulnerabilities.adoc b/modules/ROOT/pages/security-vulnerabilities.adoc
@@ -28,6 +28,13 @@ The `CWWKF0012I` message uses the word "installed", but it lists features that a
 |===
 |CVE |CVSS score by X-Force® |Vulnerability assessment |Versions affected |Version fixed |Notes
 
+|http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22354[CVE-2024-22354]
+|7.0
+|XML External Entity (XXE) injection
+|17.0.0.3 - 24.0.0.5
+|24.0.0.6
+|
+
 |http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27268[CVE-2024-27268]
 |5.9
 |Denial of service